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[57] ABSTRACT 

A video amusement gaming^ system _with pool prize 
structures including remote game terminals and a cen- 1 
tral controller with two-way communications between 
Ae remote game terminals and the central controller, j 
Prize awards are based upon ra^6m~shufilmg of aset 
of prize awards among a predetermined pool of plays 
for each remote game terminal. This ensures an equal 
distribution of prize awards to each remote game termi- 
nal. The shuffling of prizes is based upon a random seed 
produced either by the remote terminal of the central 
controller or by both. 

6 Claims, 8 Drawing Figures 



VIDEO 

DISC 

PLAYER 



SPEAKER 



CONTROL 
DEVICES 



nTsT 

TO 

m 



JOSH 



CONTROL 
LOGIC 



0 5, i 



GAME 
LOGIC 



GAME 
CONTROLLER 



58- 



3l 



OUTPUT 
DEVICES 



\ /SO 



ALARM 
SENSORS 



PRINTER 



— » | 



TERMINAL 
CONTROLLER 




ALARM 





C OIN a / OR 
ACCEPTOR 



TO CENTRAL 
CONTROLLER 



04/19/2004, EAST version: 1.4.1 



U.S. Patent Mar. 24, 1987 Sheet 1 of 6 4,652 




04/19/2004, EAST Version: 1.4.1 




04/19/2004, EAST Version: 1.4.1 



U.S. Patent Mar. 24, 1987 Sheet 3 of 6 4,652,998 




04/19/2004, EAST version: 



1.4.1 



U.S. Patent Mar. 24, 1987 Sheet4 of 6 



4,652,998 




04/19/2004, EAST version: 1.4.1 



U.S. Patent Mar. 24, 1987 Sheet 5 of 6 4,652,998 




04/19/2004, EAST Version: 1.4.1 



U.S. Patent Mar. 24, 1987 Sheet 6 of 6 4,652,998 




04/19/2004, EAST version: 1.4.1 



4,652,998 

1 2 

FIG. 3B is a detailed functional block diagram of a 
VIDEO GAMING SYSTEM WITH POOL PRIZE specific embodiment of the control logic shown in FIG. 
STRUCTURES 3A. 

FIG. 3C is a detailed functional block diagram of a 
This invention relates generally to secur e electro nic 5 specific embodiment of the game logic shown in FIG. 
gaming systems and more particular! y^o.^idmi aH usiE- 3A. 

ff i en Jl g ffl tf^^MM? 1 ^^ ^" 5 re ^°^^"^™^^ u ^ FIG. 4 is a detailed block diagram of the specific 
JfBa^^eR^lfi^ embodiment of the terminal controller shown in FIG. 3. 

Prior art lottery gaming systems have typically in- FIG. 5 is a diagram of a specific message block for- 
volved a drawings or instant "rub-ofT" games. The cur- 10 mat utilized in the illustrated embodiment 
rent lotteries involving drawing, incorporate computer- FIG. 6 is a detailed block diagram of the specific 
ized systems using electronic terminals operated by embodiment of the central controller shown in FIG. 1. 
licensed retail lottery vendors to dispense printed tick- iwtaii en report? TPXinisl np thp 

ets having the players own selection of lottery numbers prf^RRF^MMDI^NT 
printed thereon. These systems are limited in that they 15 PREFERRED EMBODIMENT 

require a clerk to operate the lottery terminal. Further, FIG. 1 illustrates in functional block diagram form a 
lotteries have been criticized for their appeal to lower specific embodiment of a secure video amusement gam- 
income consumers. However, in recent times, there has ing system with remote secure communications. The 
been explosive growth in the coin-operated video system is a lottery system which includes a number of 
amusement game market which involves an entirely 20 player operated remote secure video amusement game 
new group of consumers in a market different from any lottery terminals 20 (hereinafter referred to as remote 
existing lottery. A synthesis of these two fields presents terminals). In a preferred embodiment, thousands of 
an opportunity to permit consumer operated terminals such remote terminals 20 may be installed at remote 
offering the opportunity to win a prize and to appeal to sites such as bars, clubs, retail outlets, etc. It should be 
a new market. However, such a lottery system would 25 noted that this system of terminals may also be used in 
preferably utilize a microprocessor based game system applications not involving a payed lottery, for example, 
which can be customized for different types of games, in retail outlets where play and an opportunity to win a 
and which can communicate with a central computer. prize is provided to patrons as a promotion (e.g. using a 
To improve fairness in such a system a pool prize struc- token). 

ture can be used to ensure that lottery prize awards are 30 Each remote terminal 20 has the general appearance 
adequately distributed among the game terminals. and functions of a video amusement game including, for 

It is accordingly an object of this invention to provide example, video display screen, color graphics, sound, 
a video amusement gaming system having a unique pool laser disc technology, digital video technology, and 
prize structure. other video technology. A player activates the remote 

Briefly i _accordmgjo_one_erabodiment of the inven- 35 terminal 20 by placing his money or other form of pay- 
tion, a plaver i oper a te ^ ment in the terminal and then plays a video amusement 

fojkusfrj^ game. The player is provided with the amusement and 

ifo1 jpm^iding?ffl^ entertainment of a video game while at the same time 

qhl^^ga^^ playing the lottery thus having the opportunity to win a 

means for distributing the positions of a selected set of 40 lottery prize. This permits a lottery system with con- 
prize awards within a first pool of game plays by ran- sumer operated terminals and avoids the need for a 
domly shuffling the selected prize awards among the trained terminal operation clerk. Thus, the remote ter- 
first pool of plays according to a shuffle algorithm re- minals 20 are not bet collection devices but rather 
sponsive to a random seed, and player control devices player operated lottery game machines offering the 
for providing player control signals. A video game 45 player an opportunity to instantly win while interacting 
means provides a video amusement game display pre- with the game ma c hin e. Each remote terminal 20, in the 
sentation according to a set of game operational condi* preferred embodiment, permits the player to have a 
tions responsive to the player control signals and gam- choice of one of a plurality of different video games, 
ing means provides a prize indication disclosing a prize The choice of games may include games using only 
award characteristic of whether the position of the 50 computer generated video, games using only prere- 
game play within the first pool corresponds to the posi- corded video, such as on a video disk, or a game utiliz- 
tion of a selected prize award. ing a combination of both. 

Each remote terminal 20 is coupled, as shown, by a 

BRIEF DESCRIPTION OF THE DRAWINGS communications medium 22 to a central controller 24, 

The features of the present invention which are be- 55 which is primarily comprised of a computer. In the 
lieved to be novel are set forth below with particularity preferred embodiment, the communications medium 22 
in the appended claims. The invention, together with is a telephone link whereby central controller 24 can 
further objects and advantages thereof, may be under- maintain two-way communications with the remote 
stood by reference to the following description and terminals. Clearly, other communications media will be 
taken in conjunction with the accompanying drawings. 60 obvious to those skilled in the art, for example, a two- 

FIG. 1 is a generalized functional block diagram of a way dedicated cable, a radio frequency channel, etc. 
specific embodiment of a secure lottery video game The two-way commu n ications between the remote 
with secure remote communications. terminals is conducted using encrypted information so 

FIG. 2 is a perspective view of a specific embodiment as to prevent unauthorized access to the communicated 
of a secure lottery video game remote terminal. 65 data. 

FIG. 3A is a detailed block diagram of a specific 
embodiment of a secure lottery video game remote 
terminal. 
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of pools, among other tasks. The centra] controller 24 is 
coupled, as shown, to a number or peripheral devices 26 
such as magnetic disks for storage of data, terminals for 
operator supervision, and line printers, etc. 

Referring now to FIG. 2, a perspective view of a 
specific embodiment of the remote terminal 20 embody- 
ing various aspects of the present invention is shown. 
Remote terminal 20 is comprised of the cabinet housing 
32, having an appearance similar to an arcade video 
game which contains all necessary electronics. A dis- 
play screen 34. which may be tilted at an angle as 
shown, is provided for convenient player viewing. In 
the illustrated embodiment, display 34 is a raster scan 
display which permits display of video images, instruc- 
tions, game rules, odds of winning, and other informa- 
tion. The housing 32 also contains two speakers at the 
level of the player's ear (not shown) so as to be easily 
heard and to provide for stereo sound. Player control 
means are provided as a source of player provided stim- 



10 



15 



tional block diagram of the remote terminal electronic 
system. A primary subsystem of the remote terminal 20 
is the game controller 50 which includes game logic 51, 
which performs all functions necessary to control the 
game according to stored operational conditions. The 
game controller 50 also includes control logic 52 which 
controls a video disc player 53 (eg. an Hitachi 9500SG 
laser disc player) for playback of high resolution video 
signals prerecorded on a video disc. Other video re- 
cording devices may also be used for storage of prere- 
corded video signals, for example, digital video systems, 
videotape, etc. In addition, the control logic 52 couples 
audio signals to a set of speakers 56 through an amplifier 
55, and couples video signals to the monitor 58 under 
control of the game logic 51. The game logic 51 is cou- 
pled, as shown, to a terminal controller 70, and in con- 
junction with the terminal controller 70, executes all 
necessary lottery functions. The game controller 50 is 
further comprised of a NTSC to RGB converter 54 



uli for transfer to the system electronics. The player 20 which converts NTSC video signals from the video disc 



30 



35 



control means are mounted below the video display 
screen 34 and include two joysticks with triggers 35, 36 
and two pushbuttons 38, 39^ such as are commonly used 
in the video game art. In the illustrated embodiment, the 
joysticks 35, 36 provide signals responsive to user 25 
movement of the joysticks in a 360* radius about the 
center pivot point of the joystick to control interaction 
of the player with the game play and logic. Typically, 
the joysticks control movement of some "control spot" 
on the screen such as a dot, cursor, star, arrow, or game 
character to a desired horizontal and vertical position. 
The two joysticks allow for dual play while the trigger 
allows for easy control during fast game play action. 
The two pushbuttons 38, 39 provide for selection of 
options such as one or two player game operation and 
other control functions. Clearly, other player control 
configurations known in the art may be utilized, such as, 
touch screens, light pens, mice, audio speech recogni- 
tion units, keyboards, etc. 

Each remote terminal 20 is also provided with a con- 
ventional electromechanical or electronic coin mecha- 
nism 40 on the front of the housing 32 to accept user 
coins or tokens to actuate the terminal 20. An optional 
bill accepter or second coin mechanism may be pro- 
vided for the convenience of the player and minimize 
machine down time by providing a second means for 
payment. Other payment mechanisms may also be used, 
for example, tokens, debit cards, credit cards, etc. An 
escrow function is provided such that a player may 
decide not to play after inserting the money and may 
then receive cash or a credit receipt in return. Addition- 
ally, fewer or greater number of joysticks and pushbut- 
tons, or other player control devices, can be provided 
according to the requirements of the video games de- 
sired. 

A printer mechanism is provided at the front of the 
housing 32 mounted inside the housing. A recessed box 
42, mounted behind the front panel of the housing 32 
and opening to the front, keeps the printer beyond the 
player's reach and is used as a receptacle for tickets 
dispensed from the printer. The printer permits the 
issuance of lottery tickets as a receipt indicating a lot- 
tery win or loss, and permits printing of agent invoices, 
etc. The terminal housing 32 also includes an access 
door (not shown) to permit access by authorized per- 
sonnel to the interior of the housing 32. 

The operation of the remote terminal 20 may be un- 
derstood by reference to FIG, 3A which shows a func- 



player 53 to RGB signals for application to the video 
monitor 58. 

Player stimulus signals are output from player control 
devices 57 responsive to player activation of the player 
control devices, such as the joysticks 35, 36 or pushbut- 
tons 38 or 39 of FIG. 2. The player stimulus signals are 
coupled to the game logic 51, as shown. In addition, 
activation control signals are coupled from the coin/bill 
accepters 59 to the game logic 51 to initiate game play 
responsive to player insertion of the proper amount In 
the illustrated embodiment, 8 commercially available 
high speed electro-sensitive rotary (e.g. SCI Systems, 
Inc., Model I080-2A) printer 60 is coupled to the game 
logic 51 to permit printing of lottery tickets under con- 
trol of the game logic 51. The metallic coated paper 
used by this type of printer minimi rrs the risk of alter- 
ation and counterfeiting. In the case of high tier win- 
ners, the printing of a winning ticket is controlled by a 
valididation signal from the central controller. A num- 
40 ber of output devices 61, such as lights and solenoids, 
are coupled to the game logic 51, as shown. 

The game controller 50 has multiple game selection 
capability. In the preferred embodiment, one of four 
games may be selected by the player through the player 
control devices 57 after activation of the remote termi- 
nal by payment of the required fee through the coin/bill 
acceptors 59. The game controller 50 can operate any of 
a wide variety of games including real time computer 
generated video graphics games, games utilizing only 
prerecorded video signals recorded on a video disc, and 
games combining real time computer graphics with 
prerecorded video. 

Game programs for such computer graphics games 
and video disc games are known in the art The com- 
puter control programs involved are stored in program 
memory and can be downloaded from the central con- 
troller 24, through the terminal controller 70 to the 
game controller 50 to permit changes in the games. 
There are a wide variety of games which can be uti- 
lized. 

Computer graphics games which are suitable for the 
lottery remote terminals include such well-known skill 
based games as TRON. In a lottery system wherein 
prize awards are not to be based on skill, these games 
may be used, for example, by matching a random num- 
ber to the score generated by the game play. As an 
alternative, a win or loss determined at the time of acti- 
vation may be disclosed at some point in the game. 
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Another highly suitable game is a non-skill game such 
as Lady and the Tiger which is disclosed in detail in a 
copending application, filed Aug. 11, 1983, by Martin 
A. Keane, et aJ., entitled "Video Gaming Machine and 
Method Based Upon A Dramatic Narration/' In this 
game the player positions a character before a particular 
door and once he chooses a door, certain events result, 
such as appearance of a Lady signifying a win, a Tiger 
signifying a loss, or an open doorway which leads to the 
next scene. False clues are sometimes used to enhance 
play characteristics, for example, the Lady's handker- 
chief appears in front of a door but may or may not 
indicate the presence of the Lady. In the preferred 
embodiment, the win or loss is determined when the 
remote tenninal is activated based upon a pool (to be 
described in detail hereinafter) for that game. 

A novel game approach particularly suitable for the 
instant lottery system creates the illusion of skill while 
still determining the outcome at the time the game is 
started. In a specific embodiment, the player of the 
game is flying in a spaceship with a cockpit point of 
view having a selected number of missiles available. 
The view shows many space objects in the background, 
occasionally one of the space objects starts becoming 
larger and moves toward the player becoming a space- 
ship which is moving rapidly. The player, using the 
joystick, aims and fires a missile at the spaceship. A 
"hit" will result in an explosion with a prize value dis- 
played, and shown on a panel on the screen. The pro- 
cess is repeated with a miss merely using up a missile 
while a hit produces another prize value display. Each 
missile could follow a curved path which adds realism 
and the spaceships fly by at varied speed. The player 
must aim correctly to hit a spaceship, however, as the 
game proceeds the tolerance for a hit is widened and the 
explosion of the missile gets stronger to increase the 
chance of getting a hit. In addition, the number of 
spaceships increase until it becomes hard to miss. Thus, 
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In a specific embodiment, the game shows a motorcy- 
cle ridden through the hilly streets of San Francisco, 
with the player controlling the motorcycle by moving 
the joystick right or left to turn it The object of the 
game is to catch a limousine and obtain a prize value 
indicator from the passenger. This is done several times, 
and a win results when three identical prize values have 
been obtained. False clues are used to enhance play 
features, for example, the limousine may be shown 
ahead of the motorcycle turning a certain direction, 
thus giving the impression that turning the motorcycle 
in that direction will improve the chances of catching 
the limousine. In addition, while the game is played, the 
audio provides the sounds of a motorcycle and distinc- 
tive San Francisco street sounds. The player thus can 
experience some of the sensations of a high speed mo- 
torcycle ride through the streets of San Francisco while 
playing a lottery. 

The terminal controller 70, shown in FIG. 3A, is a 
separate, secure unit within the remote terminal housing 
32 which controls all communications in a secure man- 
ner to and from the central controller 24 (see FIG. 1), 
and handles non-secure communications with the game 
controller SO. The terminal controller 70 also controls 
all security functions for the remote terminal 20, directs 
the printing of tickets, and stores terminal play history 
and financial data for transmission to the central con- 
troller 24, and permits downloading of program code 
and other critical data from the central controller 74. 

In addition, the terminal controller 70 makes the 
determination for the low tier prize awards and controls 
the awarding of all prizes. The win values are kept in 
the tenninal controller 70 and are sent to the game 
controller 51 whenever a game starts. If the terminal 
controller 70 determines a high tier winner is to occur, 
it initiates a call to the central controller 24 for valida- 
tion. 



Bfe^pedrcccMrds of play" in formation are! kept by the 
tefrnmSSffiorn^^ 

the level of skill diminishes as the game progresses, as 40^vo1iS and plav'freauencv fate,on.an Jiourlv basisiLe. 
opposed to the conventional practice of increasing diffi- ^hourly rrieterey*^^ 

rcpi — - — — — — ^« „ r . rtkimj 



culty as the game progresses. This gives the player the 
illusion that a win or loss is dependent upon his skill. In 
actuality, the game controller completely controls the 
outcome, such that three identical prize values produce 45 
a win of that value. The result, in the preferred embodi- 
ment, is determined at the time the game is started based 
on a pool. 

Another type of game that is highly suitable for the 
instant lottery system is an interactive video disc based 
game using video image signals and audio signals prere- 
corded on a video disc. This type of game provides 
elevated levels of sophistication, quality and realism. 
Such games, using prerecorded video combined with 
real time computer graphics, utilizing game control 
circuitry as shown in FIG. 3 A, are known in the art 

A novel game utilizing only prerecorded video sig- 
nals is particularly suited for the lottery system. In this 
game, 2 to 5 second sequences (i.e. 60-150 coherent 
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55 



controller' ! 24. Ilie tennir^ > cc%trdUey7U mciuoSrar 
central processor for c»ntroi~and^r©^ 
for telephone line communications, battery back-up and 
protection circuitry to deter unauthorized a c cess to its 
stored information. As shown in FIG. 3, alarm sensor 
signals are coupled to the terminal controller 70 from 
alarm sensors 64, located in the remote terminal housing 
and the premises at which the remote tenninal is in- 
stalled to detect attempts at unauthorized access. In 
addition, alarm signals generated by the terminal con- 
troller are coupled to an alarm 66 as well as to the cen- 
tral controller 24 via the communications medium 22. A 
cash box lock control solenoid 67 is also provided, as 
shown, to permit control of the cash box. The terminal 
controller 70 can partially shut down to a power-down, 
or sleep, condition to save power, and is powered-up 



either by a call from the central controller 24 or an 
action frames) of "live" game action are filmed and 60 internal wake-up signal. The communications medium 
recorded on a video disc. Some computer generated 
graphics may also be recorded on the disc as well. Ap- 
propriate audio sounds are also recorded on the disc in 

conjunction with the video signals. The prerecorded 

sequences and audio are manipulated to form game 65 trollcr 24~In addition, the terminal controller*70 can 



22, which m^the_preferredHembodimentib a-teleph 



dsemt 

networl^ lir^^ 
^^teimiffiS'^ 



sequences. The computer graphics, either real time or 
prerecorded, are occasionally inserted between the 
sequences to fill the video disc player search time. 



initiate and transmit exception messages to the central 
controller 24 for exceptional conditions, such as unau- 
thorized entry, power outage, etc. Communications 
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between the terminal controller 70 and the game con- video signals from either the game logic 51, or the video 

t roller 50 is performed via the cable 68 coupled as disc player 53 to the monitor 58. Thus, when computer 

shown. generated graphics are to be displayed, the switch 88 

Referring now to FIG. 3B there is shown a detailed couples the signals from the game logic 51 to the moni- 
block diagram of the control logic 52 of FIG- 3A. The 5 tor 58, and when prerecorded video is to be displayed, 
control logic 52 in communication with the game logic signals from the RGB converter 54 are coupled to the 
51, controls the video disc player 53, and switches audio monitor 58. Similarly, the audio switch 90 (e.g. Motor- 
output between audio from the video disc player 53 and ola 4016) switches audio signals from either the game 
audio from the game logic 51. The control logic 52 logic 51, or the video disc player 53 to the audio ampliil- 
interrogates the video disk player to determine the cur- 10 ers 55 and thus to the speakers 56, under control of the 
rent frame location and provides instructions to step the CPU 71. The audio switch 90 is capable of controlling 
player to the next required location. In addition, the channel of stereo sound separately, thus, one 
control logic 52 switches between the video signals channnel from each source may be simultaneously cou- 
from the game logic 51 and video signals from the video ^ tne auc jj 0 amplifiers 55. 
disc player 53 coupling the selected video to the moni- 15 j n piQ 3£, there is illustrated a detailed block dia- 
tor 58. gram of the game logic 51. A central processing unit 100 

During play of a game, player control signals (e.g. ( e g zilog ^grj) ^ coupled, as shown, to a bus 92 

representative of joystick position) generated by player through a conventional address and data buffer 94 (e.g. 

manipulation of the player control devices 57 are cou- Motorola 74LS245, 74LS244). The CPU 100 is also 

pled to the programmed game processor 100 of the 20 ^pj^ to a counter-timer circuit 96 (e.g. Zilog 8430) 

game logic 51. The game processor 100 generates ap- which generates interrupt signals and to a memory 

propriate graphics, audio and control signals deter- drcuit ^ ^ ahown ^ mcmory drc ^ l 98 provides 

mined by the game operadona conations. These sig- $ e for prograin ^ and data, and is comprised of 

nals are coupled to the control logic 52 where the pro- read Qnl ^ ( Inte| ^ 2nn) ^ 

grammed processor 81 processes the sigi^s and couples 25 access mcm ( HM6264) which is pro- 

them to the monitor 58 and speakers 56 through the b a ^ ^ circuit 102. Part of the ran- 

video switch W and audio switch 90. dom access memory is safe RAM, which is protected by 

For a video disc game the si^ from the logic for ^ e of , ma . 

51 are primarily < ? on ^^^^ „ chine meter daVin addition, part of the RAM is ac- 

the game operational ^ndit^ns The j Processor 81 K> ^ downlineload control circuitry 

responsive to ^e curren " d R ^ 104 to permit downline loading of new program code 

^™u*Z fSJZZ 5? S rfSS ITtot^ ««■ datT^e safe RAM is con^olled by the CPU from 

ing signals to direct the disk player 53 to tne next re- , • e n a w * * i u *a* m.- 

quired video frame location for playback of the appro- < he bus 92 through a safe RAM control circuit 106. The 

Jriate video and/or audio signals. The addressing sig- 35 *■» » » » ^^"T ^ 

Sals are determined using a *ble or algorithm which ^Poscd of a ^kground ^ « 

relates the player control inputs to the video image horizontal counters 110 a color RAM 114 a video 

addresses consistent with the game operational condi- •d«or and driver circuit 112 and a foreground genera, 

tions. The video and/or audio signals from the video 116. The video generation circuitry creates video 

disc player 53 are coupled, under control of the proces- 40 based upon control signals from the CPU 100 

sor 81, to the monitor 58 and the speakers 56 through which specifies the images to be displayed and their 

the video switch 88 and audio switch 90. ■«»"» on screen. The monitor 58 idtimately con- 

The control logic 52 comprises a central processor 71 v «* signals to visible game and diagnostic images. 

(e.g. a Zilog 2-80) which is coupled to other circuits, as A detailed description of the video generation circuitry 

shown, via a universal bus 72. A memory 74 is provided 45 « disclai m a copending application fded Aug. 8 

for program and data storage, comprising read only 1983 by John J. Pasierb, et al., Ser. No. 520,762, and 

memory (e.g. Intel 2764) and random access memory assigned to the instant assignee. A video output 117 

(e.g. Hitachi HM6264P). A conventional clock genera- *>om the video driver circuits 112, couples video signals 

tor 76 is provided to generate required system clock to the video switch 88 of the control logic 52 (see FIG. 

signals, and a counter-timer chip 78 (e.g. a Zilog 8430) 50 3A). 

provides timing, interrupt, and control signals, with A conventional Serial Input-Output (SIO) 120 circuit 

each coupled, as shown, to the bus 72. A serial input- is coupled, as shown, to the bus 92 to provide serial to 

output (SIO) circuit 80 (e.g. Zilog 8440) is coupled, as parallel and parallel to serial conversion for interfacing 

shown, to the bus 72 to provide serial to parallel, and to the I/O circuits 122. The I/O circuits 122 comprise 

parallel to serial conversion to interface with the I/O 55 conventional RS232 Driver and Receiver circuits for 

circuits 82, 84. The I/O circuit 82 is an RS232 Driver communications with the terminal controller 70 on 

and Receiver (e.g. Motorola 1488, 1489) which couples cable 68. A baud rate clock 118 provides clock signals 

output signals to the game logic 51. The I/O circuit 84 to the SIO circuit 120. A conventional Input/Output 

is also on RS232 Driver and Receiver for coupling address decoder circuit 124 (utilizing, e.g. 74LS138, 

control signals and address signals to the standard con- 60 74LS139) is also coupled to the bus 92 to provide ad- 

trol input of the video disc player 53. An Input/Output dress decoding for the SIO 120, and for input buffers 

Decoder circuit 86, comprising a conventional decoder 126 and output drivers 128. The input buffers 126 cou- 

(e.g. 74LS138) and a latch (e.g. 74LS273), couples to pie signals from the player control devices 57 through 

the bus 72, as shown, primarily to provide decoded the bus 92 to the CPU 100, and signals from the printer 

control signals from the CPU 71 to a video switch 88 65 60 and the coin/bill acceptor 59. The output drivers 

and an audio switch 90. couple signals from the CPU 100 through the bus 92 to 

The video switch 88 (e.g. Motorola 4066's), based on control the output devices 61 and other outputs, such as 

control signals generated by the CPU 71, switches printer 60, lights, solenoids, etc. 
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In addition, a sound generator system 130 is coupled and thus continuously charges this battery to provide 

to the bus 92 through an interface RAM 129, as shown. for battery back-up during power line failures. The 

The sound generator system 130 primarily comprises a sleeper power supply 170 is coupled to the battery 168 

central processing unit 132 (e.g. Zilog Z-80), coupled to to provide short-term back-up power for the terminal 

a bus 139, with conventional program memory 134 5 controller processor 150. The memory battery 162 is 

(containing ROM and RAM) and address decoding 136 coupled, as shown, to the battery 168, and to the sleeper 

also provided, as shown. The CPU 132 controls two power supply 170, both of which charge the memory 

programmable sound generators (e.g. General Instm- battery 162. The battery 168 also provides power to the 

ments AY-3-8912) to produce highly complex sounds alarm circuit 172, which generates an alarm signal in 

upon requests from the CPU 100, which are coupled to 10 response to the detection of unauthorized access to the 

the audio switch 90 of the control logic 52 (see FIG. remote terminal housing 32 by any of a number of sen- 

3A). sors 64. The alarm signal is coupled to the terminal 

Referring now to FIG. 4, there is illustrated a de- controller internal alarm circuit 164, the terminal con- 
tailed block diagram of the terminal controller 70 trailer processor 150, and to a protection circuit 174 
shown in FIG. 3. A two-way communications line 22, is 15 which drives an alarm transducer 66 (e.g. bell, light, 
coupled from the central controller 24 through a con- etc.). The alarm sensor signals are coupled through a 
ventional input protection circuit 140 to a modem 142 conventional protection circuit 176 and through a 
(in the preferred embodiment a 300 baud, auto-answer, sleeper circuit 178 to the alarm circuit 172. An alarm 
auto-dial modem chosen for cost effectiveness), as sensor signal causes the sleeper wake-up circuit 178 to 
shown, to permit reception or transmission of encrypted 20 activate the sleeper power supply 170, if the system is in 
data. A ring detection circuit 141 detects an incoming the power -down mode. Normally, the processor 150 
call and couples a detection signal to a wake-up circuit determines if the alarm 66 should be activated and in- 
178, as shown, thereby activating the wake-up circuitry hibits the alarm 66, if it should not be activated. If the 
in the event that the terminal controller 70 is in a power- processor 150 fails to activate, the alarm 66 will not be 
down state. The wake-up circuitry generates an actua- 25 inhibited. The processor 150 also determines if a call to 
tion signal which is coupled, as shown, to a battery the central controller is required and initiates the call 
backed sleeper power supply 170 providing power to a when appropriate. 

terminal controller processor 150. The terminal controller circuitry described herein - 
The modem 142 is coupled through a conventional above, incorporates numerous novel security features. to 
serial communicator 144 to the terminal controller pro- 30 provide for secure functioning of the remote terminal, 
cessor 150, as shown. In addition, the cable 68 is cou- In addition to battery back-up and protection circuitry 
pled from the game controller 50 (see FIG. 3) through to permit erasing the encryption keys, the terminal con- 
conventional input protection circuitry 146 to a stan- troller 70 is enclosed in its own tamper resistant enclo- 
dard RS232 interface 148 to permit communications sure with sensors 163 attached to detect tampering, 
between the terminal controller 70 and the game con- 35 Other sensors 64 are positioned within the remote ter- 
troller 50. The interface 148 couples signals through the minal housing 32 and at all doors to detect penetration 
serial communicator 144 (in the preferred embodiment, of the housing 32. The terminal controller 70 includes 
comprising Zilog 8440 SIO's) to the terminal controller door sensors, AC power sensors, and phone line con- 
processor 150, as shown. The processor 150 is prefera- nection sensors. In addition, the terminal controller 70 
bly a low power processor, such as a Zilog Z-80, and is 40 allows for connection to the burglar alarm of the prem- 
coupled directly to a program memory 152, as shown. ises. The terminal controller 70 can also relay a message 
The memory 152 includes ROM and battery backed up, indicating detection of tampering or power failure to 
down-loadable RAM which permits alteration of pro- the central controller as well as to react locally with 
gram code from the central controller. In addition, a alarm 66, shut-down of the remote terminal 20, or era- 
battery powered RAM 154 is provided to permit safe 45 sure of secure information. All communication between 
data storage. A battery powered encryption and de- the terminal controller 70 and the central controller 24 
cryption key RAM 156 permits storage of an encryp- are sent in encrypted form. 

tion or decryption key used for encrypting or decrypt- A public key encryption method known as RSA 
ing data for secure communications between the termi- public key encryption can be utilized as a high security 
nal controller 70 and the central controller 24. The 50 method of encryption. This scheme involves the use of 
encryption key stored in encryption key RAM 156 is a secret key by each controller for decryption. The 
utilized by the processor 150 to encrypt any information encryption key is made common knowledge but the 
which is to be transferred from the terminal controller decryption key is not available and is kept secure in the 
70 to the central controller 24 and the decryption key is decryption key memory 116 of the terminal controller 
used for decrypting received data from the central con- 55 70. This RSA method is known to be computationally 
troller 24. The encryption and decryption key RAM intractable. This method may be used only for highly 
156 and RAM 154 is also coupled to a memory battery sensitive data such as transmission of medium security 
162 through a "key killer" circuit 158 which cuts ofT encryption keys or high tier winners because it is corn- 
power to the RAM 156 and 154 in response to an at- putationally complex and time consuming, 
tempt at unauthorized access to the terminal controller 60 A second encryption method which may be used is 
70, thereby erasing the encryption and decryption key the widely known DES (Date Encryption Standard) 
and all other RAM data. The unauthorized access is method developed by the National Bureau of Stan- 
detected by sensors 163 coupled to a terminal controller dards. This method is used for higher speed encryption 
internal alarm 164 which generates an alarm signal of medium security data, such as low security encryp- 
which is coupled as shown to the key killer 158. 65 tion or decryption keys or seed data. To improve secu- 
The power line, constituting the primary power rity, multiple levels of DES encryption may be used, 
source, is coupled as shown to a battery charger 166. Simpler, but less secure encryption methods which are 
The battery charger 166, is coupled to a battery 168, known in the art are options for low security, high 
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speed data transmissions, such as meter data, or pro- 
gram code. 

A standard message format is utilized for transmis- 
sions between the terminal controller 70 and the central 
controller 24, as illustrated in FIG. 5. A block with a 5 
maximum message length of 256 bytes of eight bits each 
is used. As shown, the first two bytes are synchroniza- 
tion codes, followed by a message number, then the 
message length. The message number is an eight bit 
number which is incremented after each message is sent, 10 
and is used for determining error recovery on missing 
blocks as well as for security to detect unauthorized 
communications. The message length is the number of 
bytes used for the text segment of the block with a 
maximum of 247 bytes per block. This text segment is IS 
encrypted for all transmissions. Following the message 
length is a message type code, with four types used in 
the illustrated embodiment. They are (1) STX-data to 
follow, (2) ACK-previous message correctly received, 

(3) NAK-previous message not correctly received, and 20 

(4) XOF-retransmit previous message after ten seconds. 
After the text bytes, an end of text or end of block code 
is inserted followed by two bytes of cyclic redundancy 
code and a guard end byte. If a message is more than 
247 bytes, multiple blocks are used for the message. 23 

Among the secured functions performed by the ter- 
minal controller processor 150 is the determination of 
prize pools to insure accurate prize payouts guarantee- 
ing a predetermined total prize value within a prese- 
lected group of plays, referred to as a "pool." In a pre- 50 
ferred embodiment, each pool contains a million plays 
and each pool is further divided into a thousand mini- 
pools of a thousand plays each. This multi-level pool 
system may be expanded to three or more levels as 
needed. For example, a major pool for high tier win- 35 
ners, secondary pool for intermediate winners and a 
mini-pool for low end winners. 

The mini-pool is used to implement a fixed low-end 
prize structure such that within a small number of plays 
(i.e. 1000) there is a preselected amount of low-end prize 40 
value (for example, low-end winners could include all 
prizes of S25 or less). Thus, there is a known amount of 
low-end prize value in each mini-pool. This ensures that 
each terminal will have its share of winning value and 
may be accomplished by using a predetermined number 45 
of each win value or by a distribution of different wins 
having equal total prize values. The central controller 
24 assigns a mini-pool for each particular game to each 
remote terminal 20 from its larger supply of 1000 mini- 
pools. Since each remote terminal 20 has a number of 50 
different games, each terminal controller maintains an 
equal number of separate mini-pools. Each time a mini- 
pool is completely used, the terminal controller 70 initi- 
ates a telephone call to the central controller 24, reports 
on the completion of the mini-pool, and a new mini-pool 55 
is assigned by the central controller 24. When all 1000 
mini-pools of a given pool have been assigned, the cen- 
tral controller 24 then creates a new pool. 

Intermediate and large or grand prize winners are 
generally not sufficient in number to permit even one of 60 
them in each mini-pool. Thus, there is a selected set of 
these high tier winners in each pool, and some mini- 
pools will contain such a large prize while some may 
contain none. 

The pools and mini-pools are determined based on 65 
random seed numbers. In the preferred embodiment, 
pool seeds, and mini-pool seeds are used which deter- 
mine the outcome of every play. The digits for the pool 
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seeds are created at the instant when the central con- 
troller needs to start a new pool. These digits are gener- 
ated using a pseudo-random number generator, such as 
are known in the art, using an input from the computer's 
clock. As a result, there is no way to predict in advance 
the randomization of a given pool. 

When a mini-pool seed is requested by the terminal 
controller 70, a value from the terminal controller clock 
is transmitted with the request. The digits of each mini- 
pool seed are generated at the central controller 24 
using the pool seed and the terminal controller clock 
value to feed a random number generator. The resulting 
mini-pool seed is then transmitted to the terminal con- 
troller 70. In addition, a high tier win is reserved to be 
included in the mini-pool. This seed is then used to 
randomize the mini-pool thus determining which play- 
ers win both high tier prizes and low-end prizes. This is 
done by using the random seed to shuffle the wins into 
a random order based on a randomizing algorithm, such 
as are known in the art, so that the distribution of wins 
within each pool will not be predictable. A suitable 
randomizing algorithm is the linear congruential 
method or a multiple pass variation of this method. The 
random number seeds and the randomizing algorithm 
are also stored by the central controller 24 to permit the 
central controller 24 to recreate the distribution of wins 
for use in validation. It should be noted that the winners 
in the games can also be generated using other methods, 
for example, where each individual play on the remote 
terminal is an independent uncontrolled random event. 

The terminal controller 70 is also involved in the 
validation process of high tier wins. When the terminal 
controller 70 determines that a high tier win will occur 
for the play of the game currently started, the terminal 
controller calls the central controller 24 to request vali- 
dation. The central controller 24 checks to verify that 
the high tier win is correct and that the allotment of 
high tier winnings for that terminal has not been used 
up. If the win is valid, the central controller 24 will 
transmit a win amount and validation code to this termi- 
nal controller 70. The terminal controller 70 sends this 
information to the game controller 50 for printing on a 
lottery ticket. The validation code on the ticket can be 
used to verify authenticity prior to payment If the high 
tier prize was not correct the central controller 24 can 
send a shut-down message to the terminal controller 70, 
which then shuts down the remote game terminal. If 
communication between the terminal controller 70 and 
the centra] controller 24 cannot be made before the end 
of a game, the terminal will not print a winning lottery 
ticket but instead the remote terminal notifies the player 
that he has won a prize and prints a special ticket that be 
must take to a validation center to determine the value 
of the win. If the printer is disabled, the terminal will 
void the play and the player will obtain a refund. The 
terminal controller 70 can then send a message to the 
game controller 50 disabling the game until communica- 
tion can be established. 

In an alternative mode, a high tier winner may enter 
his name and address, or other information into the 
remote terminal 20 using the player control devices 57. 
The terminal controller 70 then transmits this informa- 
tion to the central controller 24 thus electronically reg- 
istering the winner. The game controller then prints a 
receipt but the winner need only go to a claim center to 
obtain payment This electronic claim process improves 
the security of the claims process. 
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Terminal controller 70 serves also as a storage loca- set up to count down any integer number of clock inter- 
lion for collection of various remote game terminal rupts into one system tick time (the basic system time of 
meter data, such as, the number of games played, money which all software timers are multiples). For the p re- 
in the terminal, the amount of winnings paid out, and ferred embodiment of the terminal controller, the 10 
other data. The terminal controller 70 periodically polls S milliseconds (100 hertz) clock interrupt is used as the 
the game controller 50 to make sure it has up-to-date system tick time. At tick time, tasks are reevaluated for 
meter data. The hourly meter data is kept by the termi- priority of execution, all counters are decremented, and 
nal controller 70 in battery backed RAM 154 until it is the time of day is incremented, 
requested by the central controller and is then transmit- a vectored interrupt mode is used for all external 
ted. Once the central controller 24 has received the data 10 communications. Thus, the terminal controller 70 can 
it sends a message back to the terminal controller 70 automatically jump to various routines. In general, the 
that tells it that the meter data is safely stored in its character input routines will read a character from a 
memory, and that the terminal controller storage is po rt ^ it through a circular list, and the output 
freed up for reuse. The integrity of the meter data is also routines will read a character from a circular list, and 
maintained across the telephone transmission lines 15 wr j tc j t out to a 

through the use of a cyclic redundancy code (e.g. CRC- A non-maskable interrupt will occur only when the 

16 method as used in the IBM binary synchronous com- power has been removed from the terminal controller 

munications protocol). The addition of the cyclic re- 7Q for long ^ugh f or the battery to be low. At that 

dundancy code to the data is a commonly used method ximc thc terminal controller will initiate a phone call to 

for verifying the correctness of transmitted data. If an 20 ^ ^ntm! controller advising it of the situation, and 

error is detected at the receiving end, the central con- ^ go inactive. 

troller 24 sends back an error message to the terminal ^arm interrupt is actually a polled interrupt as it 

controller which then retransmits the data until it gets doesn , t actually mlerrU pt the processor, but instead is 

through correctly. polled during clock interrupts. An I/O port contains 

Additional security features of the terainal controller 25 ^ mdicating various n^bine statuses such as 

70 involve detection and transmission of exceptions door or r outa ^ I/G n ^ ^ one 

such as alarms, printer empty, malfunctions power ^ whjch h wheflevcr ^ status of ^ ^ 

failure, and others. When an exception is detected *e rcad duH ^ mi iwi]l 

terminal controller 70 determines the ^verity of the * dctenri ine if any actions are required. If no 

exception and sends a message to the central control 30 * J * ^ ^ terminal 

for the more serious excepuons while logging the less ^ 

severe exceptions for later transmissions. indicates that a change has oc- 

The pro-am set for the terminal con roller ^uses a alarm condition 

commercially available operating system for linkage of ^ TTu^i " «i™ * QO v «.« 

the various tasks operating witMn ^ «^ 35 [^coSl^ m^oify hs own pro 

Lim A. I, allows for up to uUcurrenUy = mg ^Sth £ a^SSE 

eludes user tasks, such as real time clock/calendar, task ««*™ programsfrom the ^cenualconteoUer 

scheduling on a time of day or a periodic basis, buffer * * wnte new game progr^from Ae cratral con- 

maragemllnt, intertask communication with buffering, * without requinng 

and many other features. Under the operating system To aHow for this program downline loading, the 

there are three main types of programs restart proce- 45 terminal controUer 70 tasks are defmed w,tt . several 

dures. interrupt service procedures, and user tasks. The non-existen tasks in the operating system task table, 

terminal controUer also has a resident library of com- The nonexistent tasks are simply defined to the operat- 

raonly used reentrant subroutines. ?*A y *T 80 f° mtS *" at 8 ? m * *£Z 

The scheduling algorithm of the operating system for fined address that initially contains a return instruction, 

task execution is absolute scheduling, so that the highest 50 Then tasks are set up so that the : non-existent tasks are 

priority task is given all the time that is needed and only never scheduled to run. These holes in the operating 

when it gives up the processor is the next highest prior- system task table are of various levels of priority to 

ity task allowed to run. This continues down to the allow for various priority options to be added, 

lowest priority task. There are no two tasks with equal When a task is to be added, an appropriate section of 

priority. This means that a task of high priority will 35 unused memory is first filled with the new task received 

inhibit the operation of all tasks of lower priority. from the communications line 22. Next, the operating 

Within the terminal controller 70, in the preferred system task table is modified to include the new task, 

embodiment, there are three types of true interrupts and The new task is scheduled to run by either directly 

one type of "polled" interrupt The three true interrupts modifying the operating system task table or by setting 

are the clock interrupt, the I/O character interrupt, and 60 up conditions that cause the existing task to schedule the 

the non-maskable interrupt. The one polled interrupt is new task to run. 

the alarm interrupt. The terminal controller 70 in the Various routines make up the terminal controUer 

form of the preferred embodiment, uses the Z-80 mode software including, the restart routines, the interrupt 

two interrupts, or vectored interrupts, which aUows the service procedures, the high priority tasks, and the low 

interrupt routines to reside anywhere in memory. 65 priority tasks. The high priority tasks include those that 

The terminal controUer 70 generates regular clock recognize communication, sensor, or clock oriented 

interrupts of a programmed frequency, which in a pre- events, and then pass control to a central message 

ferred embodiment is 100 hertz. The operating system is switcher task. The message switcher task then calls the 
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routine that can process the message involved. This tion is completed, program control quickly returns to 

allows for modular software. the task that was interrupted. The routine is initiated 

Sensor events (e.g. door open, character arrival, etc.), when a transmit buffer empty interrupt occurs causing 

communications events (eg. messages that arrive on the terminal controllers vectored interrupt mechanism 

either the communication line 68 to the game controller 5 to vector to the serial output program. There is one 

or the communication line 22 to the central controller), entry point for each serial input line and each entry 

and clock events (eg. the hourly meter store, the daily point sets up registers for line dependencies and jumps 

meter store, etc.) send messages to the message switcher to the standard character output handler, 

task which calls various event handler tasks which actu- There are a number of functions where a table system 

ally process the events. 10 is utilized and where a constant data file area is needed 

Most of the work is done by the event handler tasks, (e.g. the central controller's phone number, the encryp- 
which include routines to determine win values, and to tion keys). Thus, certain data areas are linked into mem- 
create messages for sending to the game controller 50, ory to provide the necessary data fields. The data areas 
or central controller 70. All these routines use a com- include the following: 

roon library of reentrant subroutines. The various tasks 15 A custom data area is used to store data that makes 

are arranged in order of priority with the communica- one terminal controller different from another, such as 

tion sensor and clock events being either interrupt the central controller phone number, encryption keys, 

driven or of extremely high priority, running on a decryption keys, etc. Another data area is used to store 

polled basis from the clock interrupt routine. Next in variables that are used by various routines but which 

order of priority of tasks is the message switcher, which 20 are not defined in any other manner. Another data area 

accepts the request for processing and prioritizing the is used to hold finite state tables that are used to define 

events, and then calls the appropriate routine to handle the operation of the message switcher routine. They are 

each event. The subroutines of the message switcher separated from the code to allow for quick changes to 

may determine that other processing must be done to be made for the operation of the protocol from the 

complete the processing of the events, and may reach- 25 central controller without major changes to the code, 

edule the message switcher repeatedly. The lowest The task routines are stored in order of the priority of 

priority tasks are routines which are completely non- execution so that higher priority tasks are always exe- 

criticaJ with respect to time, such as the terminal con- cuted before lower priority tasks. The task routines can 

trailer self checking routines which verify the proper be described in general as follows: 

operation of the terminal controller 70 and which run 30 A clock handler routine is the highest priority task in 

when the terminal controller has nothing else running. the system. This task updates the time of day and calls 

A number of restart routines are used that are exe- a subroutine called CLKSHED, which checks to see if 

cuted only at system start-up which perform such tasks periodic tasks are to be scheduled. It is the highest pri- 

as device initialization, setting time of day, setting ority task because the clock would be corrupted if it did 

counter timers, and so forth. 35 not run each and every clock interrupt. 

When the terminal controller 70 first begins operation Another routine T10TSK is used to test each serial 
at power-up or restart, there is a jump instruction to line status every 10 system ticks and if it is not transmit- 
jump to the A MX operating system entry point. The ting, the routine reads a circular list for a character. If 
operating system does initialization and then calls the there is a character, the character is written to the out- 
restart routine. The restart routine sets the processor 40 put port. If there's not a character nothing is done. The 
interrupt mode, programs the input ports and programs output serial lines are interrupt driven and therefore do 
the clock interrupts. The restart routine then determines not require attention while they are running. However, 
the cause of the restart and calls the appropriate subrou- some method is needed to start the line each time an- 
tine for that type of restart. other message is to be sent, thus the need for this rou- 

Under the AMX operating system, each interrupt 45 tine, 
must have its own interrupt routine. The interrupt rou- An alarm condition task routine ALMTSK is a rou- 
tines include the following routines. tine which determines the type of alarm which has 

A clock interrupt service procedure routine first occurred, and then sends a message to the message 

stores register values and then checks the alarm I/O switcher informing it which alarm has occurred. The 

port to determine if an alarm has occurred, and then 50 task is scheduled by the clock interrupt service routine 

reads and sets the alarm ports if an alarm has occurred. whenever an alarm condition is detected. 

The program then schedules the alarm handler task A central controller communications task CCCIR- 

routine if an alarm has occurred and then jumps to the CUTT is used to establish communications with the 

standard operating system clock handle routine. central controller and controls such things as dialing the 

A serial input service routine is used to read in char- 55 phone, exchanging passwords, and terminating the 

acters in response to a character interrupt and then communication in an orderly fashion. A ring detection 

writes the character to a circular list associated with the signal or a flag showing that a call is to be initiated 

input line. This provides buffered input of up to 255 causes entry to this task routine, 

characters on all incoming serial communications lines. A data link layer task routine CCDATALINK, 

After the operation is completed, control returns to the 60 scheduled and terminated by the CCCERCUIT routine, 

task that was interrupted. handles the acknowledge and no acknowledge of mes- 

A serial output interrupt service routine is used to sages, the CRC calculation and the block formatting of 
check the output circular buffer for a character for each messages for communications with the central control- 
line, and then write the character to the output port ler. 

associated with the output line if there is character, and 65 An incoming message task routine CCINLINK is 

returns from the interrupt immediately if there is not. used for handling the incoming communications from 

This provides buffering of up to 255 characters on all the central controller. This routine waits for detection 

outgoing serial communications lines. After the opera- of two sync bytes then inputs one communication block 



04/19/2004, EAST version: 1.4.1 



and passes its address to the communications data link 
routine. This routine is scheduled and terminated by 
CCCIRCUTT and communicates with the CCDATA- 
LINK routine. 

A communications outgoing task routine CCOUT- 5 
LINK handles outgoing messages and transmits the two 
synchronization bytes, message number, message 
length, message type, the text, the ETX or BOB pre- 
fixes, and the CRC code. This routine is scheduled and 
terminated by the CCCIRCUIT routine. 10 

A game communications task routine COMGAME, 
scheduled by the message switcher routine, handles all 
communications bi-directionally with the game control- 
ler. Its operation consists of getting the message on the 
communications line and sending the message to the 15 
message switcher routine, or fetching a message from 
another task and sending the message to the game con- 
troller. 

A meter task routine MTRSK reads the meter values 
and stores them for transmission to the central control- 20 
ler the next time the communications with the central 
controller is established. This task is automatically 
scheduled every hour by the operating system clock 
handler. 

A message switcher task MSGTSK is a major task 25 
within the terminal controller software. Various high 
priority tasks sense events requiring some response from 
the terminal controller and send the message switcher 
prioritized messages that the message switcher must 
handle. The message switcher looks at the message 30 
number of the incoming message, looks up the number 
in a table of subroutines, and calls the subroutine that 
handles the message. The subroutine processes the mes- 
sage, sets the various appropriate flags, and occasionally 
reschedules the message switcher to run with the new 35 
message that the subroutine has created. This permits 
quick modification from the central controller of the 
tables to alter the operation of the terminal controller 
with minor or no impact on other routines. 

A memory integrity task MEMTSK is the lowest 40 
priority task in the system. This task verifies the integ- 
rity of the memory and informs the alarm handler if an 
error is detected. 

Also stored within the memory of the terminal con- 
troller is a resident library of commonly used routines 45 
which are reentrant so that they may be used by more 
than one task. The resident subroutine library includes 
the following routines. 

A routine called INITLOAD is used to get charac- 
ters from the game controller interface and load them 50 
into RAM. No security is used for this transfer and this 
routine is used only at system start-up to load the rest of 
the non-ROM based routines into memory. 

A routine called INSTALL is used by the central 
controller for installation of the terminal controller at 55 
the agent's sites. The central controller enters values 
such as the phone number of the central controller into 
the terminal controller's memory. Once the terminal 
controller 70 has successfully finished communicating 
with the central controller 24, a fuse is blown, complet- 60 
ing the installation process and the terminal controller 
70 becomes fully operational. 

Another routine referred to as the Buffer Manager 
routine controls access to groups of temporary buffers 
that may be needed by various tasks from time to time. 65 
This routine is part of the AMX operating system. 

Another routine called CLKSHED is called once 
every second by the time/date routine within the AMX 



,998 

operating system. This routine checks the current time 
to see if any of the tasks that are to run at certain times 
are to be run a t that t ime and if so schedules them to run. 

A routine GETTIME takes the clock/counter values 
from the clock/calendar circuitry and sets the values in 
a buffe r. 

A SETTIME subroutine sets the clock/calendar 
circuit with the time and date from a time/date buffer. 

A GETCC subroutine fetches a character from the 
circular list, or waits for the next character if there isn't 
an existing character in the list. 

A PUTCC subroutine writes a character to the circu- 
lar list or waits until there is a location available and 
then writes the character. 

A CRCGEN subroutine is used to generate CRC 
code characters. 

A SAVREG routine is a general purpose register 
saving routine which saves all registers and flags on the 
stack and then returns to the position at which it was 
called. 

A RSTREG subroutine is a routine which takes the 
registers and flags that were put into the stack by the 
SAVREG subroutine and restores them to the registers. 

A POOLGET subroutine takes a pool seed and itera- 
tion number as an input and returns a win value after 
being called. 

A DECRYPT subroutine is a general purpose de- 
cryption routine that is called whenever decryption is 
required. It takes an encrypted buffer and decrypts it 
with the currently active decryption key, utilizing the 
specified encryption level. The result is placed into a 
buffer which is then returned to the calling program. 

A ENCRYPT subroutine is a general purpose en- 
cryption routine. Whenever a buffer needs encrypting, 
this routine is called with the address of the buffer and 
the level of encryption to be used. This routine then 
encrypts the buffer and returns the address of the en- 
crypted buffer to the calling program. 

A DIAL subroutine dials the phone to call the central 
controller. 

A ANSWER subroutine answers the phone when the 
central controller calls. 

A library of subroutines for use by the standard com- 
piler is also part of the run time library. 

The central message switcher task calls the event 
handler subroutines on a one at a time basis to process 
each event as it occurs. There is one event handler 
routine for each condition to be handled. The event 
handler subroutines that are used include the following 
routines. 

A MSGPOL routine is called by CCCIRCUTT 
whenever a poll message is received from the central 
controller. It interprets the message and creates an ap- 
propriate message for transmission back to the central 
controller. It then schedules the message switcher for 
the transmission of the message to the central control- 
ler. 

A MSGMD1 event handler subroutine is called 
whenever a MD1 (i.e. marketing and accounting data) 
message is to be transmitted to the central controller 
and sends the message to the CCCIRCUIT routine for 
transmission. 

A MSGAOU event handler routine is called when- 
ever an AOU (Acknowledge Outgoing message) mes- 
sage is received from the central controller. This means 
that the previous message sent by the terminal control- 
ler has been fully processed and the buffer space that is 
used may now be reused by the terminal controller. 
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A MSGHDR event handler routine is called by the which formats a ticket printing failure message which is 

message switcher whenever an hourly meter data re- then handled by the CCCIRCUIT routine to send a 

quest is received from the central controller. It inter- message from the terminal controller to the central 

prets the request and creates an hourly meter data mes- controller. In case of the printer failure together with 

sage for transmission back to the central controller, and 5 communication loss with the central controller, the 

then schedules the message switcher for the transmis- player will receive his money back, 

sion of the MD1 message to the central controller. A MSGCPO event handler subroutine is scheduled 

A MSGHTD subroutine sends the hourly data trans- by the message switcher in the event of a ticket printer 

mission message to the CCCIRCUIT routine for trans- failure and generates a claim printer order message. The 

mission to the central controller and is scheduled by the 10 message is sent by the CCCIRCUIT routine to the 

message switcher routine. central controller. 

A MSG DOR routine is called whenever the condi- A MSGTPA event handler subroutine is scheduled 

tion of one of the game doors is changed and sends a by the message switcher when a message is received to 

door open message to the central controller. This door handle ticket printer acknowledge messages, 

change condition is detected by the alarm task 15 A MSGEXD event handler subroutine is scheduled 

ALMTSK which schedules the message switcher to by the message switcher when an exception has oc- 

run the MSG DOR routine. The MSG DOR routine curred and sends a message which is an exception data 

formats the message and sends it to the CCCIRCUIT message to the CCCIRCUIT for transmission from the 

routine for transmission to the central controller. terminal controller to the central controller. 

The MSGDRC routine is called by the message 20 A MSDMSD event handler subroutine is scheduled 

switcher in response to a message from the central con- by the message handler and sends market survey data 

troller to control the condition of the cash box door from the tenninal controller to the central controller by 

solenoid. It can lock or unlock the cash box, depending formatting a message and handing it to the CCCIR- 

upon the content of the message. CUIT routine for transmission to the central site. 

A MSGINV event handler subroutine is called by the 25 A MSGCMD event handler subroutine is scheduled 
CCCIRCUIT routine whenever an invoice message is by the message switcher in response to reception of a 
received from the central controller. The invoice mes- command message from the central controller and 
sage consists of the information necessary for the print- passes the appropriate message to the required routine, 
ing of the agent's invoice. The MSGINV routine for- A MSGCMR event handler subroutine is scheduled 
mats the agent's invoice and prints it. A AIN(Acknowl- 30 by the message switcher and formats the command 
edge INcoming message) message is then scheduled to response to the central controller in response to com- 
be sent to the central controller. mand data received from the central controller. The 

A MSGAIN routine creates an AIN message which CCCIRCUIT routine then handles trarismission of the 

is sent to the CCCIRCUIT routine for transmission of response. 

the AIN message to the central controller. This message 35 A MSGPLH event handler subroutine is scheduled 
informs the central controller that various messages by the message switcher in response to a message re- 
have been correctly received and processed. ceived from a central site. The routine solicits market- 

A MSGMPR routine is called by the Pool Manager ing, accounting (same as MD1) and hourly data from 

routine whenever one of the minipools is low on win the terminal controller and constitutes the first daily 

values. A phone call to the central site is then initiated 40 poll The MSGMD2 event subroutine is then scheduled 

and an MPR message is transmitted. to run. 

A MSGMPS event handler routine is called by the The MSGMD2 event handler subroutine generates a 

CCCIRCUIT routine whenever an MPS message is message for transmitting the marketing, accounting and 

received from the central controller. This routine up- the hourly data from the terminal controller to the 

dates the minipoo! values for use in determining future 45 central controller, then hands the message to the 

win values. CCCIRCUIT routine for transmission. 

A MDGBWD event handler routine is scheduled by A MSGPWD event handler subroutine is scheduled 

the message switcher whenever a big winner has oc- by the message switcher in the event of a printer failure, 

curred and results in a sending of a message through the If the printer fails or power goes down, the remote 
CCCIRCUIT routine to the central controller. 50 tenninal terminates play before informing the player of 

A MSGBWV subroutine is called by CCCIRCUIT a win and returns money to the player, 

routine whenever a big winner validation message is FIG. 6 is a detailed functional block diagram of a 

received from the central controller. This message is specific embodiment of a centra) controller 24 (see FIG. 

then processed and sent to the big winner printer for 1) according to the invention. The central controller 24 

printing of a big winner ticket. 55 ties together and integrates all lottery system functions 

A MSGECR subroutine is called by the message providing centralized control and data collection from 

handler and generates the electronic claim receipt reject remote terminals 20 through the tenninal controllers 70. 

message sent by the CCCIRCUIT routine from the A polling procedure is utilized, whereby the telephone 

terminal controller to the central controller. If the number of each terminal controller 70 is called in se- 
printer fails or communications with the printer is lost, 60 quence, followed by transfer of data from the central 

the winner will receive a ticket which must be validated controller 24 or a message from the central controller 

at a later date, 24 requesting data. Requested data is then sent by the 

A MSGECD routine is scheduled by the message tenninal controller 70 to the central controller 24 on the 

switcher to send an electronic claim data message telephone line. The central controller 24 also keeps 
through the CCCIRCUIT routine from the terminal 65 some phone lines available to receive unsolicited excep- 

controller to the central controller. tion messages from the terminal controller 24. These 

A MSGTPF event handler subroutine which is messages can call the central controller to replenish 

scheduled by the alarm task ALMTSK is a routine exhausted resources in the terminal controller, to report 
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exceptions, high tier winners and occurrences of the transmit the appropriate data which must then be ac- 

terminal controller operation by the agents. Optionally, knowledged by the receiving controller. If the receiv- 

encryption processors 181 may be coupled to the com- ing controller does not recognize the initiating control - 

puters 180 for encrypting and decrypting transmissions. ler's password, it sends back a connect reject message. 

The illustrated system is intended to provide high 5 The initiating controller may then re-initiate the call, 

reliability and thus utilizes redundancy and conven- This protocol establishes and authenticates a connec- 

tional circuitry. It is understood that many other con fig- tion. 

urations would be possible. The data normally transmitted to the central control- 

The central controller 24 includes two fully parallel ler in response to a poll is the game meter data. This 

conventional computers 180, which in the preferred 10 includes number of games played, plays cancelled, low 

embodiment are Digital Equipment Corporation VAX tier prizes, current position in mini-pool and free games 

computers, to perform lottery management, mainte- played by repairmen. 

nance, and control functions. Two computers 180 are Certain exception messages can also be transmitted to 

provided for enhanced reliability. However, one com- the central controller 24. These include coin-in jammed, 

puter could alternatively be used. The parallel comput- 15 ticket printer paper jammed, ticket printer out of paper, 

ers 180 communicate with each other through a high remote terminal housing 32 alarm, premises alarm, and 

speed interprocessor link 179 which is a conventional power failure. 

computer communications network (e.g. Digital Equip- The tenninal controller 70 can initiate a number of 
ment Corporation's DECNET), enabling them to share unsolicited messages to the central controller 24. These 
resources and constantly monitor each other's func- 20 messages include cash box door openings, requests for 
tions. At least one conventional hard disk storage de- new minipools, high tier winner requests and others, 
vice 182 (e.g. Fujitsu "Eagle" M2284 disk drive) is All meter data, exception messages, and unsolicited 
coupled to each of the parallel computers 180, as messages are stored at the central controller 24. The 
shown, for data and file storage. A separate disk storage central controller 24 m ai n tai n s in its on-line data-base an 
device 183 is coupled to each computer 180 for logging 25 on-going log of all messages received and maintains an 
purposes. In addition, operator control station 184 in- on-line data base so that inquiries may be made regard- 
eluding a display terminal, teleprinter, and printer, are ing specific remote terminals 20. 
coupled to the computers 180 to permit operator con- The central controller 24 performs a number of major 
trol and monitoring. lottery management functions including lottery prize 

As illustrated in FIG. 6, telephone signals are coupled 30 pool maintenance and lottery performance reporting, 
from the lines 22 to a plurality of modems 178 which are The central controller 24 controls the prize pools for 
coupled to the computers 180. Such modems are widely each game. At the start of each mini-pool of 1000 plays 
known in the art. In the preferred embodiment, each for each game resident in each remote terminal, corn- 
modem is a standard 300 baud, auto-dial, auto-answer munications is established with the central controller, 
modem. 35 The remote terminal 20 first determines its portions of 

Although both computers 180 operate simulta- the seed numbers from independent changing events 

neously, when an output is required from the central occurring in each remote tenninal 20 (eg. an internal 

controller, output from only one is sent to the remote clock value). The remote terminal 20 determined por- 

terminal 20. Thus, only one of the computers is "active" tions of the seeds are then encrypted and transmitted to 

for communication to the terminals but both computers 40 the central controller 24. They are decrypted, com- 

180 continuously duplicate all functions with only the bined with centra) controller 24 determined portions of 

active output used. The high speed link 179 between the the seed numbers, then re-encrypted, transmitted back 

computers 180 provides for the integrity of data going to the remote terminal 20, decrypted, and stored in the 

out and permits resolution of control to determine sealed terminal controller 70. The terminal controller 

which computer will be active. . 45 processor 150 then controls the distribution of the prizes 

In normal operation, each computer 180 sends an based on the seeds. New prize pool data is sent to the 

*Tm alive-are you" signal to the other on a continuous terminal controller 70 whenever it has exhausted its 

basis. If the active computer fails, then after a predeter- mini-pool and requests a new mini-pool from the central 

mined period during which the inactive computer does controller. Thus, the central controller has control of 

not receive an answer, the inactive computer takes over 50 lottery prize pool parameters. 

and sends a failure message to the operator console. If Lottery performance reporting allows for on-line and 

the inactive computer fails, the active detects the failure off-line reports. On-line reports include full remote 

and sends a failure message on the operator console. terminal activity reports, pool status reports, remote 

The central controller 24 then operates in a simplex terminal availability reports and financial analysis of 

mode wherein only one computer is operational. 55 pool status for the overall lottery system. Off-line re- 

A major function of the central controller 24 is col- ports include, inter alia, prize liability reports, sales 

lection of data from the terminal controllers 70. The summaries, monthly remote terminal activity reports, 

central controller 24 maintains a list of phone numbers weekly agent sales reports, and weekly remote tenninal 

for each terminal controller 70 and dials these numbers availability reports. 

according to a polling algorithm and schedule. The 60 The central control of the lottery system permits a 
phone numbers, polling algorithm and schedule can be number of unique system capabilities. One such capabil- 
changed from the central controller 24 by the operator. ity is an electronic market survey. The sophisticated 
When either the central or terminal controller has centrally controlled lottery system can draw a random 
initiated a phone connection with another receiving sampling of players who can be asked to participate in 
controller, it sends a connect request message with its 65 an electronic marketing survey. In the electronic mar- 
password. The receiving controller then sends a con- keting survey a free game play is offered on the remote 
nect acknowledge message with its password and waits terminal if the player will answer a few, simple market 
for a transmission. The initiating controller may then survey questions. Thus, on a random, or other basis, a 
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predetermined number of plays in each mini-pool are 
selected as market survey free plays. The remote termi- 
nal displays on the video monitor the dfTer of a free 
game in exchange for answers to the market questions 
and allows the player to accept or reject the offer. As- 5 
suming the offer is accepted the basic questions, prefer- 
rably yes-no questions, are displayed beginning with 
marital status, and sex, followed by questions about 
lottery use, level of education, age, location, etc. The 
player answers the questions using the player control ,0 
devices 57. A speech recognition unit is particularly 
suitable for input of survey answers. This market survey 
could also be sold to others to permit market surveys 
relating to other than lottery markets. At the conclusion 
of the questions, a free game is provided. 15 

The programs for the central controller operate 
within a multi-programming operating system. The 
operating system utilized in the preferred embodiment 
is Digital Equipment Corporation's VMS system. There 
are two categories of processes involving concurrently 20 
operating, interactive tasks, communication processes 
and file service processes. The communications pro- 
cessing includes all activities involving communications 
to and from the remote terminals. The file services tasks ^ 
involve Tile handling interactively coupled to the com- 
munications program. 

The communications program establishes communi- 
cations with the terminal controller 70 for the purpose 
of polling, diagnostics, or dispatching commands. This ^ 
occurs in response to an appropriate request from a file 
server program. The communications program also 
responds to the terminal controller requests for the 
purpose of providing prize validation, handling excep- 
tions, handling mini-pool requests and handling door 35 
opening messages, and other terminal controller infor- 
mation. In addition, the communications program han- 
dles encryption and decryption either by utilizing an 
encryption/decryption subroutine or by utilizing en- 
cryption processors attached to the computers 180. 40 

Thus, when a message is received the communication 
program processes the information, sending it to the 
appropriate file server program. Conversely, outgoing 
message data from the central controller 24 is coupled 
from a file server program to the communications pro- 45 
gram, which then handles the communication of the 
data to the appropriate remote terminal 20. 

The file server programs are constantly running in 
the system, serving requests from the communications 
program and maintaining common files. The file server 50 
programs include the following programs: 

A polling program controls remote terminal polling, 
polling to the terminal controller 70 to collect market- 
ing and accounting data. The polls are conducted a 
predefined number of times a day in scheduled fashion, 55 
while twenty percent of them are selected randomly 
and polled at random times. 

A marketing and accounting program handles mar- 
keting and accounting data which is sent to the central 
controller as a result of polls, or which is sent with 60 
unsolicited transmissions from the terminal controller 
70 (e.g. with mini-pool requests, validations, exceptions, 
etc.). 

A pool program handles creation of new pools and 
mini-pools on request from the terminal controller. 65 

A validation program processes and stores all the 
exception messages as they arrive from the terminal 
controllers. 
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An operator program allows the central controller 
operator to access the system handling messages initi- 
ated by the operator. 

A market survey program accepts and stores the 
market survey information from the terminal controller. 

A hall of fame program receives information about 
big winners and creates a hall of fame data file. This hall 
of fame can subsequently by dispatched to the terminal 
controllers along with the poll requests. The remote 
terminal can then display the data. 

A door checking program processes incoming mes- 
sages from the' terminal controllers carrying informa- 
tion about which remote terminal doors were opened or 
closed, and in what sequence. This program can create 
exception messages depending upon the sequence of 
door opening and closing. In addition, the program also 
processes information about the contents of the cashbox 
and handles agent invoice and accounting messages. 

A logging program logs into a separate file all incom- 
ing and outgoing messages together with all other perti- 
nent information. 

Since the central controller 24 is comprised of two 
identical computers with identical files, each computer 
runs identical software. All incoming data is routed to 
both computers, but only one sends out its data. The 
systems are arbitrated by a watchdog program which 
runs continuously in each computer and interfaces with 
the watchdog program in the other computer to deter- 
mine which computer is active. The results of each 
computer would also be compared to detect an error 
condition. The program monitors its own environment 
by analyzing error messages and by a periodic hand- 
shake with the other watchdog program. If it detects 
that the other system is not in operation, it instructs the 
communications program to switch to active if it is not 
already active. 

A specific embodiment of the video amusement gam- 
ing system with pool prize structure has been described 
for purposes of illustrating the manner in which the 
invention may be made and used. It should be under- 
stood that implementation of other variations and modi- 
fications of the invention in its various aspects will be 
apparent to those skilled in the art, and that the inven- 
tion is not limited thereto by the specific embodiment 
described. It is therefore contemplated to cover by the 
present invention any and all modifications, variations, 
or equivalents that fall within the true spirit and scope 
of the basic underlying principles disclosed and claimed 
herein. 

What is claimed is: 

1. In a gaming system having a central controller and 
a plurality of remote terminals each operable for play- 
ing a game, a prize distribution system guaranteeing a 
predetermined number of winners at each terminal 
comprising: 

means included in said central controller for assigning 
a mini pool to each terminal, each of said mini-pools 
representing a fixed number of game plays and a 
predetermined number of prizes; and 

means included in each of said terminals for randomly 
distributing prizes among different plays of the 
terminal's mini pool. 

2. The gaming system of claim 1 wherein said central 
controller includes means for generating a random seed 
for each of said minipools and said prize distributing 
means of each of said terminals includes means respon- 
sive to the random seed generated for its associated 
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minipool for implementing a randomizing algorithm to 
randomly distribute the prizes. 

3. The gaming system of claim 2 wherein said central 
controller includes means for implementing the ran- 5 
domizing algorithm of each terminal based on the ran- 
dom seed generated for the terminal's minipool to vali- 
date winners at the terminal. 

4. The gaming system of claim 2 wherein each of said 10 
terminals includes means for transmitting a variable 
value to said central controller, said random seed gener- 
ating means being responsive to a variable value trans- 
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mitted from a terminal to generate the random seed for 
said terminal from said variable value. 

5. The gaming system of claim 1 wherein said central 
controller further includes: 

means for assigning each play of each of said mini- 
pools to a main pool; and 

means for randomly distributing a predetermined 
number of additional prizes among the minipools of 
said main pool. 

6. The gaming system of claim 5 wherein each of said 
terminal's prize distribution means randomly distributes 
any main pool prize distributed to its minipool with its 
mini-pool prizes. 
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